This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft File: EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft (raw, json) Hash identifier: hEAwD6B04hRMKRzeuluw3Ig8yQbaQYR9zlV/fVhwoYI= Subject key identifier: C1:8D:8C:18:CE:DE:20:46:1F:75:7A:0B:C2:F2:1D:92:C5:79:9D:7F Authority key identifier: EF:D2:09:19:B9:6F:4E:34:FA:9E:4A:0C:CC:23:47:A4:BC:D9:EA:26 Certificate issuer: /CN=EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26 Certificate serial: 10E91A493339772C684C881337F14E7D7C234875 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft Manifest number: 01F0 Signing time: Sat 06 Dec 2025 07:51:22 +0000 Manifest this update: Sat 06 Dec 2025 07:46:22 +0000 Manifest next update: Tue 09 Dec 2025 17:24:22 +0000 Files and hashes: 1: 3130332e3231392e3131322e302f32342d3234203d3e20313337333432.roa (hash: bSd7lFuLXvK7t89PrxW8ofWlYEOIMss9c7qTJsvJO80=) 2: EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.crl (hash: r+xDUSQwe+dNJ/93fkjTGUzlmZ4WSo0svYffRzV0q8A=) 3: 3130332e3131332e332e302f32342d3234203d3e20313337333432.roa (hash: a5r+evyHi4RcP5APmnZM1VFgptF4O6HvhFasr9olIfY=) 4: 323030313a6466323a336130303a3a2f34382d3438203d3e20313337333432.roa (hash: ksIEFNaSzeLI+q7xZzyqipfYLMI/o1zxI631Se0BC2U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.crl rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:e9:1a:49:33:39:77:2c:68:4c:88:13:37:f1:4e:7d:7c:23:48:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26 Validity Not Before: Dec 6 07:46:22 2025 GMT Not After : Dec 9 17:24:22 2025 GMT Subject: CN=C18D8C18CEDE20461F757A0BC2F21D92C5799D7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:33:c2:c3:38:06:7e:8d:6d:37:00:d4:dd:9d: d1:25:6e:89:da:2d:23:91:9f:42:00:0f:27:cc:3b: 79:b8:54:46:8d:fa:c3:c8:d1:ee:8d:34:f4:6c:f9: 8c:3d:11:9b:84:d5:c5:28:d9:01:6d:ab:11:b1:2e: 97:95:bf:4c:03:a2:76:4b:f0:02:74:ea:4a:7b:a5: 6a:49:4e:73:79:09:39:a3:85:e0:4f:7c:06:49:00: 26:c6:af:e1:7d:78:a5:d3:d8:ec:07:39:e5:29:d7: 97:e0:e0:2b:31:f4:95:f5:db:d8:e2:96:25:cf:06: ea:14:d5:6f:bb:36:d0:e0:a4:22:e0:88:8e:8a:4f: e4:3b:3e:94:c6:ff:5c:80:55:36:0d:f2:64:44:6a: a5:86:ed:be:69:e9:d7:55:84:5c:7c:f6:e1:0f:65: 7e:75:23:02:56:da:f2:8f:4a:79:09:d5:d6:4f:2a: 08:40:d0:b4:10:f9:c7:c8:54:40:41:14:bd:bd:00: 98:6d:e7:50:e2:6e:d1:5c:aa:f1:7d:51:13:e9:76: 16:c4:64:80:ca:bf:f0:cc:39:7f:0f:d4:a7:3b:c0: 15:d9:97:02:21:58:0c:52:8f:9c:19:d2:03:f3:05: 63:79:28:60:ab:c3:0b:cd:70:2a:23:57:6f:94:85: d5:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:8D:8C:18:CE:DE:20:46:1F:75:7A:0B:C2:F2:1D:92:C5:79:9D:7F X509v3 Authority Key Identifier: keyid:EF:D2:09:19:B9:6F:4E:34:FA:9E:4A:0C:CC:23:47:A4:BC:D9:EA:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:d6:90:9f:ed:7e:f7:f8:aa:34:a4:da:cc:38:b3:20:fe:e6: f7:c5:b1:9a:b8:cb:d7:b7:bf:2a:5d:1e:24:54:2b:d6:f0:46: 42:b2:7b:f6:60:77:42:48:f4:83:07:f5:f2:92:1a:54:cc:b3: 90:e9:3a:25:cf:8d:3f:d8:52:70:01:0b:75:62:e8:b7:d7:e7: e8:6f:a5:45:c9:67:55:46:9d:45:0f:45:fa:d6:b0:38:00:11: 81:5d:0d:cc:f6:87:56:e9:af:69:07:32:c7:7b:51:62:ae:2e: 3c:e1:fe:ef:71:69:9f:47:7d:7c:0d:86:11:3e:ab:d7:d9:e5: ed:1d:c2:64:8f:9e:b1:66:57:99:58:80:f4:9b:8d:0a:32:ef: fa:98:44:36:d1:6f:13:6c:4d:50:7d:fb:0a:20:ee:ef:6d:55: 80:df:08:9f:ea:99:67:fe:17:db:b8:a8:50:ba:4b:70:b2:37: 82:b8:8f:41:13:2b:6f:64:e1:e4:ac:5c:1f:69:95:cb:a6:2e: 3d:6d:a3:57:3b:59:0b:5b:83:72:e2:67:47:83:9a:dc:03:e7: ed:01:41:96:b0:43:c0:11:88:e4:00:a1:a4:f6:7a:65:99:15: 5e:c5:4d:10:a5:3a:91:f6:d1:17:e3:5e:19:d4:ce:02:de:1a: 73:44:51:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEOkaSTM5dyxoTIgTN/FOfXwjSHUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZEMjA5MTlCOTZGNEUzNEZBOUU0QTBDQ0MyMzQ3QTRC Q0Q5RUEyNjAeFw0yNTEyMDYwNzQ2MjJaFw0yNTEyMDkxNzI0MjJaMDMxMTAvBgNV BAMTKEMxOEQ4QzE4Q0VERTIwNDYxRjc1N0EwQkMyRjIxRDkyQzU3OTlEN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDM8LDOAZ+jW03ANTdndElbona LSORn0IADyfMO3m4VEaN+sPI0e6NNPRs+Yw9EZuE1cUo2QFtqxGxLpeVv0wDonZL 8AJ06kp7pWpJTnN5CTmjheBPfAZJACbGr+F9eKXT2OwHOeUp15fg4Csx9JX129ji liXPBuoU1W+7NtDgpCLgiI6KT+Q7PpTG/1yAVTYN8mREaqWG7b5p6ddVhFx89uEP ZX51IwJW2vKPSnkJ1dZPKghA0LQQ+cfIVEBBFL29AJht51DibtFcqvF9URPpdhbE ZIDKv/DMOX8P1Kc7wBXZlwIhWAxSj5wZ0gPzBWN5KGCrwwvNcCojV2+UhdXDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwY2MGM7eIEYfdXoLwvIdksV5nX8wHwYDVR0j BBgwFoAU79IJGblvTjT6nkoMzCNHpLzZ6iYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MWM0ODc1Ni1iNjYyLTQ2OGEtOTA2ZC02Y2Q0NjFjYjZlNDIvMC9FRkQyMDkxOUI5 NkY0RTM0RkE5RTRBMENDQzIzNDdBNEJDRDlFQTI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUZEMjA5MTlCOTZGNEUzNEZBOUU0QTBDQ0MyMzQ3QTRCQ0Q5 RUEyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTFjNDg3NTYtYjY2Mi00NjhhLTkw NmQtNmNkNDYxY2I2ZTQyLzAvRUZEMjA5MTlCOTZGNEUzNEZBOUU0QTBDQ0MyMzQ3 QTRCQ0Q5RUEyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEzWkJ/tfvf4qjSk2sw4syD+5vfFsZq4y9e3 vypdHiRUK9bwRkKye/Zgd0JI9IMH9fKSGlTMs5DpOiXPjT/YUnABC3Vi6LfX5+hv pUXJZ1VGnUUPRfrWsDgAEYFdDcz2h1bpr2kHMsd7UWKuLjzh/u9xaZ9HfXwNhhE+ q9fZ5e0dwmSPnrFmV5lYgPSbjQoy7/qYRDbRbxNsTVB9+wog7u9tVYDfCJ/qmWf+ F9u4qFC6S3CyN4K4j0ETK29k4eSsXB9plcumLj1to1c7WQtbg3LiZ0eDmtwD5+0B QZawQ8ARiOQAoaT2emWZFV7FTRClOpH20RfjXhnUzgLeGnNEUR0= -----END CERTIFICATE-----Generated at Sun Dec 7 07:34:31 2025 by rpki-client